1. Who We Are
Dripkit ("we", "our", "us") is an AI-powered email marketing platform for small businesses. We are operated by Dripkit / Polsia. If you have questions about this policy, contact us at support@dripkit.polsia.app.
2. Information We Collect
Information you provide directly
- Account information: Email address, name, and password when you sign up.
- Business information: Details about your business, products, and brand voice that you provide to configure the AI.
- Subscriber data: Email addresses and contact details you import or collect via your signup forms. This data belongs to you.
- Payment information: Processed securely by Stripe. We do not store full card numbers.
- Communications: Messages you send to our support team.
Information collected automatically
- Usage data: Pages visited, features used, and actions taken within the platform.
- Device and browser information: Browser type, operating system, IP address, and referrer URL.
- Email engagement data: Opens, clicks, bounces, and unsubscribes for campaigns sent through Dripkit.
- Cookies and local storage: We use session identifiers and UTM parameter storage to improve your experience and measure marketing effectiveness.
3. How We Use Your Information
- Provide, operate, and improve the Dripkit service
- Generate AI-written campaigns tailored to your brand voice
- Send transactional emails (account confirmations, password resets, campaign notifications)
- Process payments and manage subscriptions via Stripe
- Analyze platform usage to improve features and fix bugs
- Respond to support requests and communicate about your account
- Comply with legal obligations
4. Your Subscriber Data
Your subscriber list is yours. We process it on your behalf to send the campaigns you create. We do not:
- Sell, rent, or share your subscriber list with any third party
- Use your subscribers' data to market to them independently
- Retain subscriber data after you delete it or close your account
You can export your full subscriber list at any time from your account settings.
5. How We Share Information
We do not sell personal information. We share data only with service providers that help us operate Dripkit:
- Resend — transactional and campaign email delivery
- Stripe — payment processing and subscription management
- Anthropic (Claude) — AI-powered campaign writing (no personally identifiable subscriber data is sent)
- Neon (PostgreSQL) — database hosting
- Render — application hosting and infrastructure
All service providers are contractually bound to protect your data and use it only to provide services on our behalf.
We may disclose information if required by law, to protect our legal rights, or in the event of a business transaction such as a merger or acquisition (you will be notified).
6. Data Retention
We retain your account data for as long as your account is active. If you close your account, we delete your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.
Aggregate, anonymized analytics data may be retained indefinitely.
7. Security
We protect your data using industry-standard security practices:
- All data is encrypted in transit via TLS/HTTPS
- OAuth tokens and sensitive credentials are encrypted at rest using AES-256-GCM
- Access to production systems is restricted and logged
- We do not store plaintext passwords
No method of transmission or storage is 100% secure. In the event of a data breach, we will notify affected users promptly as required by applicable law.
8. Cookies
We use cookies and browser local storage for:
- Authentication: Keeping you logged in
- Analytics: Understanding how users interact with the site (session IDs, UTM parameters)
- Preferences: Remembering settings you've chosen
We also use the Meta Pixel for advertising measurement. You can opt out of Meta Ads tracking at facebook.com/settings.
Most browsers allow you to control cookies through settings. Note that disabling cookies may affect core functionality.
9. Your Rights
Depending on your location, you may have rights including:
- Access: Request a copy of the personal data we hold about you
- Correction: Request we correct inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Receive your data in a portable format
- Objection: Object to certain types of processing
To exercise these rights, email us at support@dripkit.polsia.app. We will respond within 30 days.
10. Children's Privacy
Dripkit is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete it promptly.
11. International Data Transfers
Dripkit operates primarily in the United States. By using our service, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your country.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and update the "Last updated" date above. Your continued use of Dripkit after any changes constitutes your acceptance of the updated policy.
13. Contact Us
Questions, concerns, or requests? Contact us at:
support@dripkit.polsia.app